Evil-DB LogoEvil-DB
← All CVEs

CVE-2009-1490

medium · 5

Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header.

5
CVSS
12.6%
EPSS (exploit prob.)
96th
EPSS percentile
2009-05-05
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
sendmailsendmail<= 8.13.1.2
sendmailsendmail2.6
sendmailsendmail2.6
sendmailsendmail2.6.1
sendmailsendmail2.6.1
sendmailsendmail2.6.2
sendmailsendmail3.0
sendmailsendmail3.0
sendmailsendmail3.0.1
sendmailsendmail3.0.1
sendmailsendmail3.0.2
sendmailsendmail3.0.2
sendmailsendmail3.0.3
sendmailsendmail4.1
sendmailsendmail4.55
sendmailsendmail5
sendmailsendmail5.59
sendmailsendmail5.61
sendmailsendmail5.65
sendmailsendmail8.6.7
sendmailsendmail8.7.6
sendmailsendmail8.7.7
sendmailsendmail8.7.8
sendmailsendmail8.7.9
sendmailsendmail8.7.10
sendmailsendmail8.8.8
sendmailsendmail8.9.0
sendmailsendmail8.9.1
sendmailsendmail8.9.2
sendmailsendmail8.9.3
sendmailsendmail8.10
sendmailsendmail8.10.0
sendmailsendmail8.10.1
sendmailsendmail8.10.2
sendmailsendmail8.11.0
sendmailsendmail8.11.1
sendmailsendmail8.11.2
sendmailsendmail8.11.3
sendmailsendmail8.11.4
sendmailsendmail8.11.5

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-1490